333 matches found
CVE-2005-4292
Cross-site scripting XSS vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keywords parameter in the Quick Find feature...
CVE-2005-4292
CVE-2005-4292 affects CommerceSQL 1.0 and earlier. Vulnerable due to cross-site scripting via unspecified search module parameters, possibly the keywords parameter in Quick Find, enabling remote injection of arbitrary script/HTML. No remediation details or exploit status provided in the connected...
CVE-2005-4285
Cross-site scripting XSS vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 the search module parameter or the 2 product and 3 cartid parameters...
CVE-2005-4281
Cross-site scripting XSS vulnerability in Zaygo HostingCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via certain search module parameters, possibly the root parameter to zaygo.cgi...
CVE-2005-4283
CVE-2005-4283 is an XSS vulnerability in The CITY Shop 1.3 and earlier. Remote attackers can inject arbitrary script/HTML via parameters to the search module (possibly store.cgi). The NVD entry assigns a CVSS v2 base score of 4.3 (Medium), with network attack vector, no authentication, and partia...
bbBoard v2 XSS vuln.
bbBoard v2 XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/bbboard-v2-xss-vuln.html vendor:http://www.bbv2.com/ affected version: v2.56 and prior Product Description: bbBoard v2 is the best message board software, guaranteed! bbBoard is...
CVE-2005-4237
Cross-site scripting XSS vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module...
CVE-2005-4252
Cross-site scripting XSS vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters...
CVE-2005-4237
Cross-site scripting XSS vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module...
VCD-db 0.9x Search Module - 'batch' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...
CVE-2005-4065
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
DEBIAN-CVE-2005-4065
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2005-4027
SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters...
CVE-2005-4027
SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters...
CVE-2005-4027
CVE-2005-4027 affects SimpleBBS 1.1. The issue is a SQL injection vulnerability reported to allow remote attackers to execute arbitrary SQL commands via unspecified search module parameters. The provided sources list a CVSS2 base score of 7.5 (HIGH) with network attack vector, low complexity, and...
trac -- search module SQL injection vulnerability
Secunia reports: A vulnerability has been reported in Trac, which can be exploited by malicious people to conduct SQL injection attacks. Some unspecified input passed in the search module isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by...
CVE-2005-3977
Cross-site scripting XSS vulnerability in QualityEBiz Quality PPC 1553 allows remote attackers to inject web script or HTML via the REQ parameter to the search module...
CVE-2005-3977
Cross-site scripting XSS vulnerability in QualityEBiz Quality PPC 1553 allows remote attackers to inject web script or HTML via the REQ parameter to the search module...
NukeETSQL32.txt
Nuke ET 'search' module 'query' variable SQL injection Vendor url: www.truzone.org exploit available:yes vendor notify:yes advisore:http://lostmon.blogspot.com/2005/11/ nuke-et-search-module-query-variable.html Nuke ET have a flaw which can be exploited by malicious people to conduct SQL injectio...